Staff Software Engineer - Security

The role

This Staff Software Engineer will own security architecture, harden the platform, and build the compliance posture. You will secure AI and agentic systems, build security tooling, and manage incident response.

What you will do

• Own security architecture across the platform
• Harden the full stack from application security to cloud infrastructure
• Drive SOC 2 and prepare for certifications like export control and ITAR
• Secure AI and agentic systems including prompt injection and guardrails
• Build security tooling for detection, monitoring, vulnerability management, and CI/CD
• Stand up and run incident response
• Work with sales and product to pass security reviews

Required qualifications

• 8+ years building production software
• Experience running secure services at scale in the cloud
• Deep experience in application and cloud security (AWS, GCP, or Azure)
• Experience with identity and access, secrets, network security, and data protection
• Experience owning security in a regulated or high-trust environment
• Implemented SOC 2
• Solid on threat modeling, secure architecture, and incident response
• Secured AI or LLM systems
• Comfortable being the security lead at a startup and setting the agenda

Nice to have

• Export control, ITAR, or FedRAMP experience

Benefits

• Competitive salary
• Meaningful equity
• Health, dental, and vision coverage
• Flexible time off
• Support for experimentation, learning, and staying current with the AI ecosystem

About the company

Flow Engineering is an AI-native requirements platform for modern engineering organizations. It enables hardware teams to collaborate with AI agents to design, validate, and evolve complex systems.